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From: o (i: OAKLEY HEALTH GROUP) EBENE 


Sent: 12 February 2020 15:37 

To: SARguidance 

Subject: Consultation response 
Attachments: ICO_consult_letter_to_3rd_parties.pdf 


External: This email originated outside the ICO. 


Dear ICO, 


I have updated the letter I send to 3 parties when they have assisted data subjects 
in making SARs, and once we have provided the SAR directly to the data subject. 


I would like to submit this to your consultation. I will to the same to the forthcoming 
EDPB's consultation on data subject access rights. 


I reassert my opinion that the draft advice from the ICO that data controllers 
"should" provide the SAR directly to the 3% party, so completely bypassing the data 
subject, is wholly incorrect, at odds with Article 15, and utterly fails to uphold the 
data subject's right of access. 


Data controllers are under no obligation whatsoever to disclose the SAR to anyone 
but the data subject. They may choose to, but they do not have to. 


Why the ICO believes health records should be some sort of exception, I do not 
know. If anything, upholding patient confidentiality is of the utmost imperative with 
such sensitive data. 


Kind regards, 


Oakley Health Group 
Yateley Medical Centre 
Oaklands 

Yateley 

Hampshire GU46 7LS 
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www.oakleyhealth.org 


facebook.com/oakleyhealth 
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This message may contain confidential information. If you are not the intended 
recipient please inform the 

sender that you have received the message in error before deleting it. 

Please do not disclose, copy or distribute information in this e-mail or take any 
action in relation to its contents. To do so is strictly prohibited and may be 
unlawful. Thank you for your co-operation. 


NHSmail is the secure email and directory service available for all NHS staff in 
England and Scotland. NHSmail is approved for exchanging patient data and other 
sensitive information with NHSmail and other accredited email services. 


For more information and to find out how you can switch, 
https://portal.nhs.net/help/joiningnhsmail 


